21f3b1c543cf195e585955657e243784bba506629657a97433ac6b3749b9e831N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f3b1c543cf195e585955657e243784bba506629657a97433ac6b3749b9e831N
Size

120KB
MD5

01d45643fb06cec9ffc1f2ce453f7820
SHA1

61bd352e1ae2f93b83e40ee9964241127d1b3d9e
SHA256

21f3b1c543cf195e585955657e243784bba506629657a97433ac6b3749b9e831
SHA512

42ab7f41a515bbb7a5c7d9a479c887ef15cea913a622ad620778eb0e8fac888eac39d804355e00f3b0e92d35244915c9d12c0b058b37efac6d7051d76dd81726
SSDEEP

3072:QSCH6tHCcxqC3TmWQW/uzsf3fYawS6qpAJLME:7ZCXCqWczsoa9g1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f3b1c543cf195e585955657e243784bba506629657a97433ac6b3749b9e831N

Files

21f3b1c543cf195e585955657e243784bba506629657a97433ac6b3749b9e831N
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ